Koneeseen iski pahan sisuinen örkki joka vaihtoi taustakuvan johonkin virusilmoon... oon yrittäny poistaa vähän kaikilla softilla (ad-aware, spybot ewido) ja nyt viimeisimpänä eScanilla, joka ilmoittaa örkit poistetuksi mutta seuraavalla ajolla on taas uuusia eikä vaivat katoa mihinkään. Tällaiset HIV raportin sain eScan ajosta...
File C:\Program Files\Common Files\Totem Shared\Update\dial.dll.015 tagged as not-a-virus:Dialer.Win32.DialerOffline. No Action Taken.
File C:\Program Files\Common Files\Totem Shared\Update\DialerOffline.dll.010 tagged as not-a-virus:Dialer.Win32.DialerOffline. No Action Taken.
File C:\Program Files\GPSMapper\SendMap\sendmap.exe infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File C:\Program Files\GPSMapper\SendMap\sendmap17.zip infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File C:\Program Files\IMG2GPS\sendmap.exe infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File C:\Program Files\IMG2GPS\sendmap20.exe infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{7909B741-16DD-42AA-80FF-DA64B7B14F06}\RP16\A0040694.0XE infected by "Trojan-Downloader.Win32.Delf.ks" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{7909B741-16DD-42AA-80FF-DA64B7B14F06}\RP16\A0040743.0XE infected by "Trojan-Downloader.Win32.Delf.ks" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{7909B741-16DD-42AA-80FF-DA64B7B14F06}\RP16\A0040759.0XE infected by "Trojan-Downloader.Win32.Delf.ks" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{7909B741-16DD-42AA-80FF-DA64B7B14F06}\RP16\A0041134.exe infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{7909B741-16DD-42AA-80FF-DA64B7B14F06}\RP16\A0041135.exe infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{7909B741-16DD-42AA-80FF-DA64B7B14F06}\RP16\A0041136.exe infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File F:\GPS\Karttoja\Mapsource topo1\sendmap.exe infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File F:\GPS\Softaa ja päivityksiä\sendmap20_2.8.zip infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File C:\Program Files\Common Files\Totem Shared\Update\dial.dll.015 tagged as not-a-virus:Dialer.Win32.DialerOffline. No Action Taken.
File C:\Program Files\Common Files\Totem Shared\Update\DialerOffline.dll.010 tagged as not-a-virus:Dialer.Win32.DialerOffline. No Action Taken.
File C:\Program Files\GPSMapper\SendMap\sendmap.exe infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File C:\Program Files\GPSMapper\SendMap\sendmap17.zip infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File C:\Program Files\IMG2GPS\sendmap.exe infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File C:\Program Files\IMG2GPS\sendmap20.exe infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{7909B741-16DD-42AA-80FF-DA64B7B14F06}\RP16\A0040694.0XE infected by "Trojan-Downloader.Win32.Delf.ks" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{7909B741-16DD-42AA-80FF-DA64B7B14F06}\RP16\A0040743.0XE infected by "Trojan-Downloader.Win32.Delf.ks" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{7909B741-16DD-42AA-80FF-DA64B7B14F06}\RP16\A0040759.0XE infected by "Trojan-Downloader.Win32.Delf.ks" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{7909B741-16DD-42AA-80FF-DA64B7B14F06}\RP16\A0041134.exe infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{7909B741-16DD-42AA-80FF-DA64B7B14F06}\RP16\A0041135.exe infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{7909B741-16DD-42AA-80FF-DA64B7B14F06}\RP16\A0041136.exe infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File F:\GPS\Karttoja\Mapsource topo1\sendmap.exe infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
File F:\GPS\Softaa ja päivityksiä\sendmap20_2.8.zip infected by "Backdoor.Win32.IRCBot.jh" Virus. Action Taken: File Renamed.
Vastaukset 4
Vanhimmat
Järjestelmänpalautus kansiossa on kökkiä.
http://www.virustorjunta.net/modules.php?name=FAQ&myfaq=yes&id_cat=6&categories=Yleisohjeita ongelmatilanteiden ratkaisuun
tolta palstalta saat apua tohon ongelmaan
http://keskustelu.suomi24.fi/show.fcgi?category=108&conference=4500000000000628&subcat=758
ensiksi nettipiuhat irti koneesta ja seuraavaksi ota käyttöön Easy Cleaneri ja poista seuraavat tiedostot
>Rekisteri
>Turhat
>Tiedostot
>Evästeet
>Sivuhistoria
>OK.
Ota järjestelmänpalautus pois päältä Win 98/ME/XP
Näitten jälkeen laita kone vikasietotilaan ja scannaa viirusohjelmalla. Lopuksi muista laittaa järjestelmänpalautus päälle.
tuolta käyttöön. http://groups.msn.com/FileShareFinland/tietoturva3.msnw